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O (57) Abstract: Systems and methods for dynamic and risk-aware networic security are described. In one embodiment, a system 
O dynamically assesses whether a connection over a communications medium (102) is anomalous (suspicious, malicious, deviating 

fron^ normal behavior, fits a certain profile or pattern, or has the potential to be any one of these) and generates an appropriate 
^ response depending on whether tiie connection is deemed to be normal or anomalous for a specified period of time. The types of 

responses include, but are not limited to, blocking the source of the connection fix>m connecting to its intended destination, altering 
^ the destination of the connection, auditing the connection, or any combination of these. 
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